Beveiligingsadvies

CVE-2026-31070

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-05-19 00:00:00

Laatst bijgewerkt 2026-05-20 13:55:31

Toegewezen door mitre

CVSS-score 9.8

Status PUBLISHED

Beschrijving

The LalanaChami Pharmacy Management System (commit 5c3d028) allows unauthenticated remote attackers to escalate privileges by self-assigning an administrative role during registration. The /api/user/signup endpoint fails to validate the role parameter in the request body

← Alle CVE's bekijken Bekijk op cve.org ↗